Enable or disable Dynamic ARP Inspection on a VLAN

You must enable DAI separately for each VLAN. When you enable DAI on a specific VLAN, the ARP packets are captured and inspected on that VLAN. DAI is disabled by default.

Note

DAI cannot be enabled on Private VLANs (E-Tree) and SPBM B-VLANs.

Before you begin

You must enable DHCP Snooping globally.

Procedure

Enter VLAN Interface Configuration mode:

enable

configure terminal

interface vlan <1–4059>
Enable DAI on the VLAN:

ip arp-inspection enable
Disable DAI on the VLAN:

no ip arp-inspection enable

Example

Switch:1>enable
Switch:1#configure terminal
Switch:1(config)#interface vlan 5
Switch:1(config-if)#ip arp-inspection enable

Variable Definitions

The following table defines parameters for the ip arp-inspection command.


Variable	Value
`enable`	Enables or disables DAI on the specified VLAN.